Tenable

MARCH 29, 2024

Check out new guidance for banks on combating AI-boosted fraud. Plus, how to cut cyber risk when migrating SCADA systems to the cloud. The report also devotes an entire section to best practices, including: Include AI risk management within your organization’s broader enterprise risk management program. And much more!

Systems Review 67

Systems Review Weak Development Team Banking System 67

Tenable

JANUARY 26, 2024

Cyber agencies from multiple countries published a joint guide on using artificial intelligence safely. And a global survey shows cyber pros weighing pros and cons of AI. Plus, CERT’s director says AI is the top skill for CISOs to have in 2024. Plus, the UK’s NCSC forecasts how AI will supercharge cyberattacks. And much more!

Artificial Inteligence 117

Artificial Inteligence Artificial Intelligence Weak Development Team Technical Advisors 117

Tenable

DECEMBER 6, 2022

Tenable CIO Patricia Grant and CSO Robert Huber share insights and best practices to help IT and cybersecurity leaders and their teams weather the next cyber crisis of Log4j proportions. They’re important questions to ponder, especially with the findings about the current state of Log4j remediation that Tenable recently disclosed.

Policies 97

Policies Software Exercises Organization 97

Tenable

MAY 9, 2023

This is the first of a four-part series examining the period of time between when a vulnerability is first discovered and when it is fully disclosed on the National Vulnerability Database. We explore the impact of that gap on an organization’s cyber risk and discuss how Tenable can help. Indicators of Attack ( IoA ).

Organization 52

Organization Weak Development Team Research Fashion 52

Tenable

AUGUST 30, 2023

Here’s how Tenable Nessus can help. When Tenable Nessus was launched in 1998, the attack surface consisted of only traditional IT devices — desktops, workstations, network equipment, etc. What’s needed is Tenable Nessus Expert. A solution whose assessment capabilities evolve as the modern attack surface evolves.

Applications 98

Applications Study Open Source Report 98

Tenable

JUNE 3, 2020

IDC’s first-ever market share report for the worldwide device vulnerability management market ranks Tenable as #1 in market share for 2019 and credits the company for extending its reach far beyond vulnerability management. The report ranks Tenable as #1 in market share and revenue for the past two years. .

Marketing 104

Marketing Machine Learning Artificial Inteligence Research 104

Tenable

AUGUST 25, 2023

Cyber leaders believe prevention and detection have a bigger cybersecurity impact. 3 – CISA to AI vendors: Put security at the heart of your software Artificial intelligence tools are, at their core, software products, and as such their developers must build them secure by design. The reason?

Malware 98

Malware Artificial Inteligence Open Source Artificial Intelligence 98

Tenable

FEBRUARY 9, 2024

The Volt Typhoon hacking gang is stealthily breaching critical infrastructure IT environments so it can strike on behalf of the Chinese government, cyber agencies say. And enterprises go full steam ahead with generative AI, despite challenges managing its risks. Plus, ransomware gangs netted $1 billion-plus in 2023.

Weak Development Team 68

Weak Development Team Infrastructure Generative AI Artificial Inteligence 68

Tenable

JUNE 6, 2022

External Attack Surface Management (EASM) is an essential foundation of cybersecurity best practices. Soon, you’ll be able to take advantage of automated attack surface discovery in Tenable products. It isn’t hyperbole to state that nearly all security controls and best practices hinge on visibility in order to be effective.

Internet 53

Internet Conference Malware Organization 53

Tenable

JULY 25, 2023

CVE Description CVSSv3 Severity CVE-2023-35078 Ivanti Endpoint Manager Mobile (EPMM) Authentication Bypass Vulnerability 10.0 Tenable was provided access to the support article and our blog post reflects what we currently know about this vulnerability. It was formerly known as MobileIron Core prior to its acquisition by Ivanti in 2020.

Mobile 98

Mobile Knowledge Base Authentication Government 98

Tenable

FEBRUARY 24, 2023

1 - Study: Salaries go up for cyber architects and engineers Employers are showing cybersecurity architects and cybersecurity engineers the money. In their paper “Deep Reinforcement Learning for Cyber System Defense under Dynamic Adversarial Uncertainties,” researchers from the U.S. Then dive into SaaS governance best practices.

Security 99

Security Engineering Technical Review IoT 99

Tenable

SEPTEMBER 8, 2023

1 - Study: Being a cyber pro is tough, and it ain’t getting any easier Most cybersecurity professionals feel their jobs are getting harder, due to factors like staffing shortages, tighter budgets, growing compliance requirements and increasingly complex attacks. Plus, the U.S. We also look at recommendations to mitigate DDoS attacks.

Technical Review 70

Technical Review Systems Review Software Review Survey 70

Tenable

OCTOBER 6, 2023

A SANS Institute survey found that budgets for ICS/OT security have shrunk, and advises on how to do more with less. Plus, hiring managers boost starting salaries to recruit stellar cyber pros. In addition, CISA’s Cybersecurity Awareness Month campaign challenges tech vendors to build safer products. And much more!

Budget 67

Budget Report Survey Open Source 67

Tenable

JANUARY 17, 2023

Frameworks and standards for prioritizing vulnerability remediation continue to evolve, yet far too many organizations rely solely on CVSS as their de facto metric for exposure management. Here, we discuss other important frameworks and provide guidance on how Tenable can help. Vulnerability management starts with CVSS.

Metrics 53

Metrics How To Technical Review Analysis 53

Tenable

APRIL 19, 2024

1 - Multinational cyber agencies issue best practices for secure AI deployment Looking for best practices on how to securely deploy artificial intelligence (AI) systems? Meanwhile, a new open-source tool aims to simplify SBOM usage. And don’t miss the latest CIS Benchmarks updates. And much more! and the U.S.

Artificial Inteligence 65

Artificial Inteligence Trends Technical Advisors Analysis 65

Tenable

APRIL 28, 2020

Adjusting to the new normal, state and local governments need to be more vigilant and streamlined in protecting their environments against cyber predators. Now, ransomware purveyors and other cyber hackers are licking their chops to take advantage of any signs of weakness as governments react to this worldwide crisis.

Government 95

Government Meeting Resources Programming 95

Tenable

JANUARY 5, 2024

In addition, the cost of cyber incidents is rising. Despite the significant progress AI and machine learning have made, these technologies are vulnerable to attacks that can cause spectacular failures with dire consequences,” NIST computer scientist Apostol Vassilev, who is one of the publication’s authors, said in a statement.

Artificial Inteligence 73

Artificial Inteligence Systems Review System Generative AI 73

Tenable

DECEMBER 9, 2022

1 - One year after Log4j crisis, what have we learned? One year later, we’ve learned from recently released Tenable telemetry research that Log4j’s Log4Shell remains very much an issue. One year later, we’ve learned from recently released Tenable telemetry research that Log4j’s Log4Shell remains very much an issue.

Software Review 52

Software Review SMB Malware Development Team Review 52

Tenable

MAY 25, 2023

Background On May 24, several international agencies — including the Cybersecurity and Infrastructure Security Agency (CISA), Federal Bureau of Investigation (FBI) and the National Security Agency (NSA) in the U.S, Yes, the joint CSA highlights two vulnerabilities in ManageEngine and FatPipe products that have been linked to Volt Typhoon.

Malware 52

Malware Windows Groups Internet 52

Tenable

JANUARY 3, 2023

External attack surface management (EASM) is difficult and oftentimes confusing, especially in a world of poor inventory controls and a growing attack surface. Rather, the important thing is to understand that you can’t protect assets if you don’t know they are exposed to the internet. Don't be fooled by outdated inventory controls.

Internet 91

Internet Study Research Programming 91

Tenable

AUGUST 5, 2022

That’s the bad news the Cybersecurity and Infrastructure Security Agency’s Cyber Safety Review Board delivered in a recent report. Drive best practices for security hygiene, such as automated vulnerability management, asset inventorying and vulnerability mitigation, as well as secure software development practices.

Development Team Review 52

Development Team Review Software Review Systems Review Technical Review 52

Tenable

DECEMBER 22, 2022

Patch Tuesday’s Impact on Cybersecurity Over the Years Dive into the history of Patch Tuesday and learn how it continues to influence the ways security teams manage patches. Background on MS Patch Tuesday. Source: Tenable Research, December 2022. Source: Tenable Research, December 2022.

Weak Development Team 98

Weak Development Team Metrics Research Systems Review 98

Tenable

JULY 14, 2021

Many vendors offering tools such as security information and event management (SIEM), endpoint detection and response (EDR) and managed detection and response (MDR) have added vulnerability assessment capabilities to their offerings, as well. Do they take asset criticality into account — and if so, to what extent? and Tenable.ot

Organization 98

Organization Marketing Tools Research 98

Tenable

OCTOBER 27, 2023

government’s cyber incident response plan. That’s one key finding of the “ State of Cybersecurity 2024 ” report from the Computing Technology Industry Association (CompTIA), which polled 511 U.S. National Cyber Incident Response Plan (NCIRP), which the U.S. Plus, how CISA plans to revamp the U.S. We’re talking about the U.S.

Artificial Inteligence 65

Artificial Inteligence Artificial Intelligence Technical Review Backup 65

Tenable

JUNE 8, 2020

On June 8, researcher Yunus Çadirci published an advisory for CallStranger , a vulnerability in the Universal Plug and Play (UPnP) protocol. UPnP is currently managed by the Open Connectivity Foundation (OCF). Tenable product coverage for this vulnerability can be found in the “identifying affected systems” section below.

LAN 111

LAN Media IoT Systems Review 111

Tenable

OCTOBER 20, 2022

Securing today’s complex and dynamic IT environments requires bringing together vulnerability management, Web application security, cloud security, identity security, attack path analysis and external attack surface management to help you understand the full breadth and depth of your exposures. Why is exposure management so important?

Programming 53

Programming Tools Organization Analysis 53

Tenable

MARCH 17, 2023

government advisory with the latest on LockBit 3.0. s cyber agency is warning users about ChatGPT. With its new Ransomware Vulnerability Warning Pilot (RVWP) program, CISA probes internet-facing assets from critical infrastructure organizations and alerts them when it detects vulnerabilities that ransomware gangs commonly compromise.

Infrastructure 52

Infrastructure Groups ChatGPT Generative AI 52

Tenable

MAY 6, 2021

The sharing of financial data across applications is changing how consumers save, manage and spend their money. This burst of innovation creates tremendous opportunity for financial institutions to cross-sell and tailor financial products based on consumer data. Take a holistic view to protect your most critical assets.

Banking 81

Banking Network Compliance Artificial Intelligence 81

Tenable

JULY 15, 2020

Following active exploitation against F5 BIG-IP devices, exploit attempts targeting newly disclosed vulnerabilities in Citrix products have begun, which include potential extraction of VPN sessions on vulnerable targets. The NSIP address is a specific device IP address dedicated to the management interface for Citrix devices.

WAN 108

WAN Technical Review Software Review Groups 108

Tenable

JULY 22, 2020

On June 19, the Australian Cyber Security Centre (ACSC) published Advisory 2020-008 in response to reports that threat actors were targeting Australian government agencies and companies. Researchers at BishopFox published a blog post in December 2019 on CVE-2019-18935. CVE-2019-18935. chris doman (@chrisdoman) May 9, 2019.

WAN 98

WAN Software Review Authentication Government 98

Tenable

OCTOBER 29, 2021

At the 2021 Aspen Cyber Summit, Mandiant chief operating officer Kevin Mandia said it well : “Somewhere around 2016 or 2017[…] I noticed that whoever’s breaking in and whoever is doing the crime aren’t even the same people anymore [.] Vulnerabilities in VPN products have been the focus of many attacks from diverse threat actors.

SMB 98

SMB Software Review Minimum Viable Product Systems Review 98

Tenable

DECEMBER 14, 2020

Nation-state threat actors breached the supply chain of a popular IT management software provider in order to infiltrate government agencies and private companies. On December 13, several news outlets, including Reuters , The Washington Post and The Wall Street Journal , reported that multiple U.S. Vulnerability Management.

Security 121

Security Journal Report Malware 121

Tenable

FEBRUARY 28, 2019

Customer presentations, product demos, and an entire day devoted to the public sector are just some of the activities Tenable has planned for RSA Conference 2019. Continuous demonstrations of our latest product breakthroughs are just some of the activities we have planned for RSAC this year. Organization.

Conference 70

Conference Wireless Energy Program Management 70

Tenable

JUNE 8, 2022

Note : We refer in this blog post to “ ahead of NVD” as the various actions that Tenable took before details for a given vulnerability were made available by NVD. Specifically: Ahead of NVD coverage - Tenable released a plugin for the first time before NVD published any details for the CVE. Exploitation and how Tenable helps.

Linux 52

Linux Software Review Authentication Comparison 52

Tenable

JUNE 10, 2020

In the last of our three-part series, Tenable Research evaluates the prevalence of vulnerabilities across the global population, as well as the implications of those findings on attackers' economic incentives. This is the third and final installment of our blog series on persistent vulnerabilities and their causes.

Organization 103

Organization Research Internet Strategy 103

Tenable

APRIL 13, 2020

on June 5, 2019. However, its CVSS score was not updated until September 19, 2019, one month after research about the flaw became publicly available on August 9 as well as the external attempts to identify the vulnerability in the wild along with CVE-2019-11510 on August 22. Threat Intensity. CVE-2019-11510.

Research 104

Research Virtualization Organization Network 104

Tenable

NOVEMBER 25, 2022

Require “phising-resistant” multifactor authentication as much as possible, in particular for services like webmail, VPNs, accounts with access to critical systems and accounts that manage backups. Understanding the Ransomware Ecosystem: From Screen Lockers to Multimillion-Dollar Criminal Enterprise ” (Tenable blog).

Metrics 52

Metrics Cloud Backup Software Review 52